last executing test programs: 15m32.715337533s ago: executing program 2 (id=342): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad0", 0x21}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f0000000540)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736f1caacc2bbf1194598a652677efb930a5b6ee292c5", 0xd8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d7e918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac708818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e5707be06bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a2e2a151d9aa4fc9c5", 0xb3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="e6bac1668e5b309efda177b827c14e1e59e57a59774d9a207d394f8b262cb974444d941c9401556676af700fd38224908adba4b8aee34bca25112816982b78c0be11782e21f26b871d9870f08d7834856d8a5dc7b179af4e0195037bf8f88583e76883590a3b12847f967a26b34ee3189936ac699c3a26c9b3d0", 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000001c0)="d59f41c0418ebad512facf22d697f3c97fa25becae148b518203467ee73c881817657efe92a415cd70d9ae44e7de8d81f558e67adb0be705fcdae72a6125b0a47c9267278147923ab3f54170671e0918c5d3fa469152f3ec9191578240878db51753dbc15f7852f7e1614e75c90c", 0x6e}, {&(0x7f0000000700)="73347c742785f90aa563b4c01785f8371c6c153843eb25bce2d86628414138f6d3eb90c44817fbcc958e331db94a8d1119eefe09b541e73e4789594b627b7ba94f6c14265df07fabab61972e1be26c0cb37d32c3a771e304e6f8cc49bdbdb05c7569b6300fef45f8992df412b3f5905c23ae4503aa74d9fca9224332942529f26a5775237db47e838d478fa852f9cecd4a33d022d908d78e33f7fefaa1f92a1a2dd193e2484b2d719f288f1b036c64f6f3da5d91a8a65ed54c2ce9a8b5ca53433dfe15559c287c9951195be8025a", 0xce}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="54586baeba0fbf8bf3", 0x9}], 0x4, &(0x7f0000000d00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x80}}], 0x5, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 15m32.206183387s ago: executing program 2 (id=347): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) io_setup(0x3, &(0x7f0000000180)) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}], [], 0x2f}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf0000000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 15m26.898937443s ago: executing program 2 (id=352): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) io_setup(0x3, &(0x7f0000000180)) socket(0x400000000010, 0x3, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}], [], 0x2f}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getrusage(0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf0000000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 15m21.597718378s ago: executing program 2 (id=360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10000, 0x0) 15m16.554361561s ago: executing program 2 (id=395): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000003100)={0x0, 0x0, 0x0}, 0x8050) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r1, &(0x7f0000000380)=""/221, 0xdd, 0x101) 15m16.28290448s ago: executing program 2 (id=397): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(0x0, 0x1, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendfile(r1, r0, 0x0, 0x5) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb00f21800006fcc723dab2001ac000c000085cb4cc6ff65a16000070000000600000000000013020000"], 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 15m0.883821744s ago: executing program 32 (id=397): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(0x0, 0x1, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendfile(r1, r0, 0x0, 0x5) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb00f21800006fcc723dab2001ac000c000085cb4cc6ff65a16000070000000600000000000013020000"], 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 12m33.868095691s ago: executing program 0 (id=1166): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083", 0x9d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4cae", 0x6}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 12m31.392589838s ago: executing program 0 (id=1173): newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) read(0xffffffffffffffff, 0x0, 0x21) read(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000026000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc89f, 0xf000, 0x3, 0x1d4}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) io_uring_enter(r0, 0x4095, 0x7721, 0x16, 0x0, 0x0) 12m29.693075544s ago: executing program 0 (id=1174): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = dup(0xffffffffffffffff) sendmsg$inet(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000008c0)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x7f, 0x100, @void}}}}}}}, 0x0) 12m25.893435246s ago: executing program 0 (id=1177): syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x141000, 0x0) memfd_secret(0x80000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x95) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x43, 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 12m21.786848499s ago: executing program 0 (id=1188): mq_open(&(0x7f0000000000)='!s\"D\xd7$\xd6\xe0\x8b\xdb\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x80, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8c0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12m20.389195065s ago: executing program 0 (id=1192): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(0x0, 0x1, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendfile(r1, r0, 0x0, 0x5) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) socket$netlink(0x10, 0x3, 0x14) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r5) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x840) rseq(&(0x7f0000001040)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) 12m5.040942501s ago: executing program 33 (id=1192): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(0x0, 0x1, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendfile(r1, r0, 0x0, 0x5) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) socket$netlink(0x10, 0x3, 0x14) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r5) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x840) rseq(&(0x7f0000001040)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) 10m28.675540774s ago: executing program 3 (id=1393): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@hyper, 0xffffffff}, @hyper, 0xc, 0x0, 0x1, 0x4, 0x5a, 0x4, 0x800}) close(r0) 10m28.326405184s ago: executing program 3 (id=1396): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xfffffffc, @loopback, 0xc7f}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x80, 0xfe, 0x0, 0x9, 0x40, 0x4f, 0x5a, 0x4, 0xff, 0x9, 0xfe, 0x0, 0x9}, 0xe) recvmmsg(r0, &(0x7f0000000740), 0x0, 0x0, 0x0) 10m28.04948441s ago: executing program 3 (id=1398): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000f80)=ANY=[@ANYBLOB="00df19"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f00000001c0)={0x20, 0x1, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m23.30307366s ago: executing program 3 (id=1400): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48) sysfs$2(0x2, 0x7ff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r4, 0x0, '\x00', 0x0, r3, 0x0, 0x5}, 0x50) 10m21.68158007s ago: executing program 3 (id=1402): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000180)="f584772a2314fff395db5526c445a319fb80689ac89175b1a7e4ca276ed500feb87e98a23e1df0f5d22be01fe762fc62c87e06231ea47f3abc02a041ae0d956de8ddc8536656793c79075915fb1739e7c599a18b2dc7ee86811b3ceeb5132d2da193662f9a754720eaaf20f32857be3b1186f67f8ae5450772368bb1a8fc5dc328de6b3807cf49f0d9", 0x89, 0xfffffffffffffffb) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 10m20.213857936s ago: executing program 3 (id=1403): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) io_setup(0x3, &(0x7f0000000180)) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}], [], 0x2f}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10m4.648191701s ago: executing program 34 (id=1403): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) io_setup(0x3, &(0x7f0000000180)) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}], [], 0x2f}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m5.24343457s ago: executing program 4 (id=2644): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x45, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x4000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x404080, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m4.37469587s ago: executing program 4 (id=2647): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_open_dev$I2C(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x5b) keyctl$revoke(0x3, r0) 1m3.755618389s ago: executing program 4 (id=2649): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083", 0x9d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4cae", 0x6}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m0.957653195s ago: executing program 4 (id=2653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x407) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x2100100, 0x0, 0x0, &(0x7f0000001680), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ppoll(&(0x7f0000000000)=[{r3, 0xc6}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x20) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 59.819167424s ago: executing program 4 (id=2656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 59.667120516s ago: executing program 4 (id=2658): shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) 17.558227575s ago: executing program 5 (id=2749): r0 = syz_open_dev$media(0x0, 0x2, 0x129081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c80, 0x0) 15.75880615s ago: executing program 5 (id=2753): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xa0000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@hyper, 0xffffffff}, @hyper, 0xc, 0x0, 0x1, 0x4, 0x5a, 0x4, 0x800}) 10.576463712s ago: executing program 6 (id=2756): keyctl$instantiate(0xc, 0x0, 0x0, 0x1d, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8800, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x11, &(0x7f0000000040)="0200000009", 0x5) 10.424125797s ago: executing program 5 (id=2757): syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {{0x4e21, 0x4e22, r0, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "3432d50049a01b5156c2f44c038e91ba"}]}}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x0, 0x80800) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000006040)=[{{&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000005c0)='6', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000001e40)}], 0x1}}], 0x2, 0x48000) 10.216714303s ago: executing program 1 (id=2758): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0x0, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x0, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x5, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x435, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x7ff, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x200, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0xfffffffe, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x12b0, 0x6, &(0x7f0000000640)="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"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="e6bf049d51e61f8dc06efe03001e7bdac916ed8df2f7182d5aafb1d1756c4b514543d18ca1b834b7171166c6a67a96090000006b6575e215232465d6bc0e6222001056b47057962792cf1b9c43c9765d5a186cbcc76964453542", @ANYRES16=r2, @ANYBLOB="000128bd7000fedbdf254100000008000300", @ANYRES32=0x0, @ANYBLOB="0500180127"], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4004840) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.739800172s ago: executing program 7 (id=2759): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(0x0, 0xffff, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c, 0x0}, 0x801) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000680)={0x2, 0x5, 0x7, 0xf8, 0x40, 0x40, 0x81, 0xb, 0x8, 0x4, 0x4, 0x8, 0x4, 0xdc}, 0xe) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) 9.122164932s ago: executing program 6 (id=2760): syz_usb_connect(0x2, 0x3f, 0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x40}], 0x2}], 0x1, 0x0) 8.2147012s ago: executing program 7 (id=2761): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 8.18332922s ago: executing program 1 (id=2762): r0 = syz_open_dev$media(0x0, 0x2, 0x129081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c80, 0x0) 7.845662392s ago: executing program 5 (id=2763): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200", @ANYRES32], 0x20, 0x6044}, 0x6) 6.870320954s ago: executing program 1 (id=2764): close(0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x141000, 0x0) memfd_secret(0x80000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0xb90, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, 0x0, 0x0) landlock_restrict_self(r4, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 6.850222224s ago: executing program 5 (id=2765): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, r3}) 6.799470427s ago: executing program 6 (id=2766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x109200, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10}, 0xfc00) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x3, 0x0, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000600)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r5, 0x3ba0, &(0x7f0000000640)={0x48, 0xa, r9, 0x0, r10}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x6, 0x0, 0x1, 0x8, 'syz1\x00', &(0x7f0000000180)=['\xff\xd9\'\x00'], 0x4}) 4.663918997s ago: executing program 1 (id=2767): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r2, r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) unshare(0x62000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 4.313039612s ago: executing program 6 (id=2768): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x20008b}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x100004) write$eventfd(r2, &(0x7f0000000240), 0xffffff14) 3.500136248s ago: executing program 7 (id=2769): keyctl$instantiate(0xc, 0x0, 0x0, 0x1d, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8800, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x11, &(0x7f0000000040)="0200000009", 0x5) 3.455957863s ago: executing program 1 (id=2770): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(0x0, 0xffff, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c, 0x0}, 0x801) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000680)={0x2, 0x5, 0x7, 0xf8, 0x40, 0x40, 0x81, 0xb, 0x8, 0x4, 0x4, 0x8, 0x4, 0xdc}, 0xe) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) 2.184354951s ago: executing program 6 (id=2771): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0x0, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x0, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x5, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x435, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x7ff, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x200, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0xfffffffe, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x12b0, 0x6, &(0x7f0000000640)="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"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="e6bf049d51e61f8dc06efe03001e7bdac916ed8df2f7182d5aafb1d1756c4b514543d18ca1b834b7171166c6a67a96090000006b6575e215232465d6bc0e6222001056b47057962792cf1b9c43c9765d5a186cbcc76964453542", @ANYRES16=r2, @ANYBLOB="000128bd7000fedbdf254100000008000300", @ANYRES32=0x0, @ANYBLOB="0500180127"], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4004840) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.183255512s ago: executing program 7 (id=2772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) geteuid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) 1.618856597s ago: executing program 1 (id=2773): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000380)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="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", 0xec0) 513.3387ms ago: executing program 7 (id=2774): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6044}, 0x6) 244.071511ms ago: executing program 7 (id=2775): syz_usb_connect(0x2, 0x3f, 0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x40}], 0x2}], 0x1, 0x0) 94.976385ms ago: executing program 6 (id=2776): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="200000000000000084000000020000000600040028", @ANYRES32=r2], 0x20, 0x6044}, 0x6) 0s ago: executing program 5 (id=2777): syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {{0x4e21, 0x4e22, r0, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "3432d50049a01b5156c2f44c038e91ba"}]}}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): criptor?? [ 769.551222][ T6051] usb 5-1: USB disconnect, device number 54 [ 771.249277][ T6051] usb 6-1: USB disconnect, device number 29 [ 771.853484][T11405] bridge_slave_1: left allmulticast mode [ 771.853518][T11405] bridge_slave_1: left promiscuous mode [ 771.853811][T11405] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.529814][T11405] bridge_slave_0: left allmulticast mode [ 772.529838][T11405] bridge_slave_0: left promiscuous mode [ 772.530013][T11405] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.129305][T11405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.806762][T11405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.736269][T11405] bond0 (unregistering): Released all slaves [ 779.278822][ T6014] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 779.446437][ T6014] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 779.446469][ T6014] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 779.446509][ T6014] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 779.446524][ T6014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.450968][ T6014] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 779.450997][ T6014] usb 6-1: no configuration chosen from 1 choice [ 779.803552][T11405] hsr_slave_0: left promiscuous mode [ 779.843311][T11405] hsr_slave_1: left promiscuous mode [ 779.844108][T11405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.893925][T11405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.944207][T11405] team0 (unregistering): Port device team_slave_1 removed [ 782.026384][ T6014] usb 6-1: USB disconnect, device number 30 [ 782.155942][T11405] team0 (unregistering): Port device team_slave_0 removed [ 782.517286][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1932'. [ 786.569407][ T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 786.817106][ T10] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 786.817140][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 786.817181][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 786.817206][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.862965][ T10] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 786.862996][ T10] usb 6-1: no configuration chosen from 1 choice [ 787.883286][T12416] binder_alloc: 12415: binder_alloc_buf, no vma [ 788.111246][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 788.157438][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 788.163037][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 788.179428][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 788.180349][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 789.085033][ T5145] usb 6-1: USB disconnect, device number 31 [ 789.234282][ T6051] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 789.393375][ T6051] usb 2-1: Using ep0 maxpacket: 16 [ 789.395721][ T6051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.395756][ T6051] usb 2-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 789.395771][ T6051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.411125][ T6051] usb 2-1: config 0 descriptor?? [ 789.583302][ T5145] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 789.671144][T12418] chnl_net:caif_netlink_parms(): no params data found [ 789.772608][ T5145] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 789.772643][ T5145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.772664][ T5145] usb 5-1: Product: syz [ 789.772678][ T5145] usb 5-1: Manufacturer: syz [ 789.772692][ T5145] usb 5-1: SerialNumber: syz [ 789.905680][ T6051] usbhid 2-1:0.0: can't add hid device: -71 [ 789.905813][ T6051] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 789.919190][ T6051] usb 2-1: USB disconnect, device number 20 [ 790.086316][ T5967] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 790.230119][T12418] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.230378][T12418] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.230988][T12418] bridge_slave_0: entered allmulticast mode [ 790.242733][T12418] bridge_slave_0: entered promiscuous mode [ 790.248034][T12418] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.248263][T12418] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.248790][T12418] bridge_slave_1: entered allmulticast mode [ 790.255570][T12418] bridge_slave_1: entered promiscuous mode [ 790.263646][ T5967] usb 6-1: Using ep0 maxpacket: 32 [ 790.265809][ T5967] usb 6-1: config 139 has an invalid interface number: 49 but max is 0 [ 790.265835][ T5967] usb 6-1: config 139 has no interface number 0 [ 790.265865][ T5967] usb 6-1: config 139 interface 49 has no altsetting 0 [ 790.268536][ T5967] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 790.268561][ T5967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.268580][ T5967] usb 6-1: Product: syz [ 790.268594][ T5967] usb 6-1: Manufacturer: syz [ 790.268608][ T5967] usb 6-1: SerialNumber: syz [ 790.406165][T10314] Bluetooth: hci0: command tx timeout [ 790.472061][T12418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.560921][ T5967] radio-usb-si4713 6-1:139.49: Si4713 development board discovered: (10C4:8244) [ 790.587734][ T5967] radio-usb-si4713 6-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 790.608533][ T5967] usbhid 6-1:139.49: couldn't find an input interrupt endpoint [ 790.640075][ T5967] usb 6-1: USB disconnect, device number 32 [ 790.666227][ T5145] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 790.666711][ T5145] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 790.688659][ T5145] cdc_ncm 5-1:1.0: bind() failure [ 790.759105][ T5145] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 790.759160][ T5145] cdc_ncm 5-1:1.1: bind() failure [ 790.823817][ T5145] usb 5-1: USB disconnect, device number 55 [ 790.852169][T12418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.089692][T12418] team0: Port device team_slave_0 added [ 791.101332][T12418] team0: Port device team_slave_1 added [ 791.716972][ T5145] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 791.912798][ T5145] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 791.912835][ T5145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.912858][ T5145] usb 5-1: Product: syz [ 791.912874][ T5145] usb 5-1: Manufacturer: syz [ 791.912890][ T5145] usb 5-1: SerialNumber: syz [ 792.494084][T10314] Bluetooth: hci0: command tx timeout [ 792.665537][ T5145] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 792.665632][ T5145] cdc_ncm 5-1:1.0: bind() failure [ 792.715452][ T5145] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 792.715507][ T5145] cdc_ncm 5-1:1.1: bind() failure [ 792.754110][ T5145] usb 5-1: USB disconnect, device number 56 [ 792.910450][T12418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.910469][T12418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.910497][T12418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.041453][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 793.101966][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 793.120210][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 793.139473][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 793.140249][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 793.536465][T12478] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 793.566435][T12418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.566457][T12418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.566488][T12418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.573314][ T59] Bluetooth: hci0: command tx timeout [ 794.754278][T12418] hsr_slave_0: entered promiscuous mode [ 794.758019][T12418] hsr_slave_1: entered promiscuous mode [ 794.759083][T12418] debugfs: 'hsr0' already exists in 'hsr' [ 794.760829][T12418] Cannot create hsr debugfs directory [ 795.443308][ T59] Bluetooth: hci4: command tx timeout [ 796.686299][ T59] Bluetooth: hci0: command tx timeout [ 797.588997][ T59] Bluetooth: hci4: command tx timeout [ 799.720078][ T59] Bluetooth: hci4: command tx timeout [ 801.763373][ T59] Bluetooth: hci4: command tx timeout [ 802.438327][ T40] bridge_slave_1: left allmulticast mode [ 802.438351][ T40] bridge_slave_1: left promiscuous mode [ 802.438556][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.536809][ T40] bridge_slave_0: left allmulticast mode [ 802.536843][ T40] bridge_slave_0: left promiscuous mode [ 802.537173][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.833291][ T5145] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 802.988880][ T5145] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 802.988918][ T5145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.988941][ T5145] usb 5-1: Product: syz [ 802.988957][ T5145] usb 5-1: Manufacturer: syz [ 802.988973][ T5145] usb 5-1: SerialNumber: syz [ 803.365109][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.515238][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.599617][ T5145] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 805.641797][ T5145] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 805.645096][ T40] bond0 (unregistering): Released all slaves [ 805.673181][ T5145] cdc_ncm 5-1:1.0: bind() failure [ 805.678770][ T5145] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 805.678803][ T5145] cdc_ncm 5-1:1.1: bind() failure [ 805.689388][T12471] chnl_net:caif_netlink_parms(): no params data found [ 805.722013][ T5145] usb 5-1: USB disconnect, device number 57 [ 806.934845][ T40] hsr_slave_0: left promiscuous mode [ 806.953375][ T40] hsr_slave_1: left promiscuous mode [ 806.954538][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.004098][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.943799][ T40] team0 (unregistering): Port device team_slave_1 removed [ 809.075176][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.075361][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.125891][ T40] team0 (unregistering): Port device team_slave_0 removed [ 811.333287][T10095] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 811.560882][T10095] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 811.560931][T10095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.560954][T10095] usb 5-1: Product: syz [ 811.560970][T10095] usb 5-1: Manufacturer: syz [ 811.561002][T10095] usb 5-1: SerialNumber: syz [ 813.136662][T10095] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 813.137214][T10095] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 813.406671][T12620] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 813.501290][T12620] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 814.090541][T10095] cdc_ncm 5-1:1.0: bind() failure [ 814.127913][T12471] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.128149][T12471] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.128411][T12471] bridge_slave_0: entered allmulticast mode [ 814.176721][T12471] bridge_slave_0: entered promiscuous mode [ 814.194366][T12471] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.196143][T12471] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.196370][T12471] bridge_slave_1: entered allmulticast mode [ 814.226518][T12471] bridge_slave_1: entered promiscuous mode [ 814.332932][T10095] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 814.333011][T10095] cdc_ncm 5-1:1.1: bind() failure [ 814.714697][T10095] usb 5-1: USB disconnect, device number 58 [ 814.997647][T12629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 815.008528][T12629] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 817.027605][T12471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.084618][T12471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.912725][ T9136] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.040187][T12471] team0: Port device team_slave_0 added [ 820.232661][ T66] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.655020][T12471] team0: Port device team_slave_1 added [ 820.783260][ T66] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.330270][ T8328] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.390397][T12471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.390415][T12471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.390440][T12471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.273251][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 822.434086][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 822.434122][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.434145][ T9] usb 5-1: Product: syz [ 822.434161][ T9] usb 5-1: Manufacturer: syz [ 822.434177][ T9] usb 5-1: SerialNumber: syz [ 822.588748][T12471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.588769][T12471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.588872][T12471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.315901][ T9] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 823.316386][ T9] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 823.329199][ T9] cdc_ncm 5-1:1.0: bind() failure [ 823.384829][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 823.384887][ T9] cdc_ncm 5-1:1.1: bind() failure [ 823.428924][ T9] usb 5-1: USB disconnect, device number 59 [ 825.052410][T12471] hsr_slave_0: entered promiscuous mode [ 825.064405][T12471] hsr_slave_1: entered promiscuous mode [ 825.068692][T12471] debugfs: 'hsr0' already exists in 'hsr' [ 825.068721][T12471] Cannot create hsr debugfs directory [ 828.188243][T12418] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 828.370457][T12418] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 828.830760][ T5145] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 828.926005][T12418] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 828.968374][T12418] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 828.989160][ T5145] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 828.989190][ T5145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.989203][ T5145] usb 6-1: Product: syz [ 828.989212][ T5145] usb 6-1: Manufacturer: syz [ 828.989221][ T5145] usb 6-1: SerialNumber: syz [ 829.020541][T12418] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 829.083465][T12418] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 829.283927][T12418] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 829.345148][T12418] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 830.590335][T12730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 830.675863][T12730] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 830.734572][T12730] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 831.198090][ T5145] cdc_ncm 6-1:1.0: SET_CRC_MODE failed [ 831.198600][ T5145] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 831.217688][ T5145] cdc_ncm 6-1:1.0: bind() failure [ 831.270614][ T5145] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 831.270665][ T5145] cdc_ncm 6-1:1.1: bind() failure [ 831.315772][ T5145] usb 6-1: USB disconnect, device number 33 [ 832.406637][T12418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.296606][T12759] netlink: 'syz.5.2050': attribute type 1 has an invalid length. [ 834.296624][T12759] netlink: 'syz.5.2050': attribute type 4 has an invalid length. [ 834.296632][T12759] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2050'. [ 835.972294][T12418] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.281634][ T8318] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.281805][ T8318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.371005][T11405] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.371160][T11405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.113239][ T5145] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 837.275162][ T5145] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 837.275207][ T5145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.275359][ T5145] usb 5-1: Product: syz [ 837.275376][ T5145] usb 5-1: Manufacturer: syz [ 837.275392][ T5145] usb 5-1: SerialNumber: syz [ 837.985398][ T5145] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 837.985490][ T5145] cdc_ncm 5-1:1.0: bind() failure [ 838.052230][ T5145] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 838.061511][ T5145] cdc_ncm 5-1:1.1: bind() failure [ 838.146708][ T5145] usb 5-1: USB disconnect, device number 60 [ 840.416593][ T8328] bridge_slave_1: left allmulticast mode [ 840.416619][ T8328] bridge_slave_1: left promiscuous mode [ 840.416806][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.494857][ T8328] bridge_slave_0: left allmulticast mode [ 840.494881][ T8328] bridge_slave_0: left promiscuous mode [ 840.495089][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.402050][ T8328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.516100][ T8328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.609524][ T8328] bond0 (unregistering): Released all slaves [ 843.683275][T10095] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 845.680843][T10095] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 845.689135][T10095] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 845.689173][T10095] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 845.689196][T10095] usb 6-1: Product: syz [ 845.689212][T10095] usb 6-1: Manufacturer: syz [ 845.689227][T10095] usb 6-1: SerialNumber: syz [ 847.024658][T10095] usb 6-1: can't set config #1, error -71 [ 847.038033][T10095] usb 6-1: USB disconnect, device number 34 [ 847.223472][ T8328] hsr_slave_0: left promiscuous mode [ 847.457045][ T8328] hsr_slave_1: left promiscuous mode [ 847.457721][ T8328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.494205][ T8328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.695560][T12863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 847.700967][T12863] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 847.704703][T12863] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 849.378937][T10314] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 849.410366][T10314] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 849.411850][T10314] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 849.629191][T12878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 849.647729][T12878] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 850.130756][T12879] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 850.390514][T12879] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 851.014213][ T8328] team0 (unregistering): Port device team_slave_1 removed [ 851.073933][ T8328] team0 (unregistering): Port device team_slave_0 removed [ 853.017603][ T59] Bluetooth: hci5: command tx timeout [ 854.513274][ T5934] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 854.663166][ T5934] usb 5-1: Using ep0 maxpacket: 16 [ 854.666152][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.666208][ T5934] usb 5-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 854.666234][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.723598][ T5934] usb 5-1: config 0 descriptor?? [ 855.044320][ T59] Bluetooth: hci5: command tx timeout [ 855.201615][ T5934] usbhid 5-1:0.0: can't add hid device: -71 [ 855.201757][ T5934] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 855.243126][ T5934] usb 5-1: USB disconnect, device number 61 [ 855.671367][T10314] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 855.747261][T10314] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 855.748901][T10314] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 855.820217][T10314] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 856.286508][T10314] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 857.125284][ T59] Bluetooth: hci5: command tx timeout [ 857.636779][T12926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 857.641723][T12926] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 858.483522][ T59] Bluetooth: hci0: command tx timeout [ 859.206451][ T59] Bluetooth: hci5: command tx timeout [ 860.695060][ T59] Bluetooth: hci0: command tx timeout [ 862.589418][T12873] chnl_net:caif_netlink_parms(): no params data found [ 862.723174][ T59] Bluetooth: hci0: command tx timeout [ 864.803184][ T59] Bluetooth: hci0: command tx timeout [ 865.347933][T13010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 866.179256][T12906] chnl_net:caif_netlink_parms(): no params data found [ 866.715546][T12873] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.715659][T12873] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.715837][T12873] bridge_slave_0: entered allmulticast mode [ 866.732948][T12873] bridge_slave_0: entered promiscuous mode [ 868.395443][T12873] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.395595][T12873] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.395813][T12873] bridge_slave_1: entered allmulticast mode [ 868.399751][T12873] bridge_slave_1: entered promiscuous mode [ 869.678593][ T5905] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 869.823208][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 869.825921][ T5905] usb 5-1: config 139 has an invalid interface number: 49 but max is 0 [ 869.825952][ T5905] usb 5-1: config 139 has no interface number 0 [ 869.825987][ T5905] usb 5-1: config 139 interface 49 has no altsetting 0 [ 869.832910][ T5905] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 869.832943][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.832965][ T5905] usb 5-1: Product: syz [ 869.832980][ T5905] usb 5-1: Manufacturer: syz [ 869.832997][ T5905] usb 5-1: SerialNumber: syz [ 870.275663][ T5905] radio-usb-si4713 5-1:139.49: Si4713 development board discovered: (10C4:8244) [ 870.490242][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.490324][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.763981][ T5905] radio-usb-si4713 5-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 870.764640][ T5905] usbhid 5-1:139.49: couldn't find an input interrupt endpoint [ 870.778763][ T5905] usb 5-1: USB disconnect, device number 62 [ 871.426742][T13055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 872.547370][T12873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.640606][T12873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.716715][T12906] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.716850][T12906] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.717084][T12906] bridge_slave_0: entered allmulticast mode [ 872.728746][T12906] bridge_slave_0: entered promiscuous mode [ 872.803004][T12906] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.803777][T12906] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.804158][T12906] bridge_slave_1: entered allmulticast mode [ 872.822662][T12906] bridge_slave_1: entered promiscuous mode [ 872.846168][T12873] team0: Port device team_slave_0 added [ 872.884640][T12873] team0: Port device team_slave_1 added [ 872.914984][ T59] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 873.123653][T12906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.235078][T12906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.442998][T12873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.443018][T12873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.448654][T12873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.510130][T12873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.510149][T12873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.510174][T12873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.791657][T12906] team0: Port device team_slave_0 added [ 874.130835][T13089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 874.138098][T13089] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 876.068147][T12906] team0: Port device team_slave_1 added [ 876.814924][T12873] hsr_slave_0: entered promiscuous mode [ 876.819901][T12873] hsr_slave_1: entered promiscuous mode [ 876.822876][T12873] debugfs: 'hsr0' already exists in 'hsr' [ 876.822905][T12873] Cannot create hsr debugfs directory [ 876.926155][T12906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.926175][T12906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.926203][T12906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.005645][T12906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.005665][T12906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.005696][T12906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.223657][T12906] hsr_slave_0: entered promiscuous mode [ 877.225228][T12906] hsr_slave_1: entered promiscuous mode [ 877.226246][T12906] debugfs: 'hsr0' already exists in 'hsr' [ 877.226272][T12906] Cannot create hsr debugfs directory [ 877.293883][ T5934] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 877.478100][T13116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 877.482115][T13116] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 878.576983][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 878.577023][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 878.577054][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 878.577084][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 878.577131][ T5934] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 878.577158][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.613871][ T5934] usb 2-1: config 0 descriptor?? [ 878.615199][T13108] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 878.804487][ T8328] bridge_slave_1: left allmulticast mode [ 878.804522][ T8328] bridge_slave_1: left promiscuous mode [ 878.805120][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.877232][ T8328] bridge_slave_0: left allmulticast mode [ 878.877267][ T8328] bridge_slave_0: left promiscuous mode [ 878.877871][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.033653][T13108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.036212][T13108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.044657][T13108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.046830][T13108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.256872][ T5934] usbhid 2-1:0.0: can't add hid device: -71 [ 879.257017][ T5934] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 879.281726][ T5934] usb 2-1: USB disconnect, device number 21 [ 880.918407][ T8328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.994408][ T8328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.037343][ T8328] bond0 (unregistering): Released all slaves [ 881.171282][ T5905] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 881.364858][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 881.364898][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 881.364931][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 881.364960][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 881.365006][ T5905] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 881.365031][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.446314][ T5905] usb 5-1: config 0 descriptor?? [ 881.447904][T13150] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 881.858600][T13150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.859812][T13150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.879672][ T8328] hsr_slave_0: left promiscuous mode [ 881.911636][T13150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.926417][T13150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.949053][ T8328] hsr_slave_1: left promiscuous mode [ 881.959894][ T8328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.985403][ T8328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.139402][ T5905] usbhid 5-1:0.0: can't add hid device: -71 [ 882.139556][ T5905] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 882.202238][ T5905] usb 5-1: USB disconnect, device number 63 [ 883.877042][ T8328] team0 (unregistering): Port device team_slave_1 removed [ 883.944705][ T8328] team0 (unregistering): Port device team_slave_0 removed [ 884.225220][ T5479] 8021q: adding VLAN 0 to HW filter on device eth14 [ 884.355621][ T36] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 884.516868][ T36] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 884.516908][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 884.516938][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 884.516968][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 884.517015][ T36] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 884.517041][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.788475][ T36] usb 5-1: config 0 descriptor?? [ 884.789789][T13201] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 885.220163][T13201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.220846][T13201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.222796][T13201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.255904][T13201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.476887][ T36] usbhid 5-1:0.0: can't add hid device: -71 [ 885.477025][ T36] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 885.496386][ T36] usb 5-1: USB disconnect, device number 64 [ 885.523247][T10314] Bluetooth: hci4: command 0x1003 tx timeout [ 885.527305][ T59] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 888.573218][ T5145] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 888.723214][ T5145] usb 2-1: Using ep0 maxpacket: 8 [ 888.726198][ T5145] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 888.726237][ T5145] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 888.726263][ T5145] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 888.726298][ T5145] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 888.726345][ T5145] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 888.726370][ T5145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.043825][ T5145] usb 2-1: GET_CAPABILITIES returned 0 [ 889.043885][ T5145] usbtmc 2-1:16.0: can't read capabilities [ 889.348881][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 889.571053][ T5145] usb 2-1: USB disconnect, device number 22 [ 892.408490][ T8328] bridge_slave_1: left allmulticast mode [ 892.408526][ T8328] bridge_slave_1: left promiscuous mode [ 892.408819][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.245070][ T8328] bridge_slave_0: left allmulticast mode [ 893.245116][ T8328] bridge_slave_0: left promiscuous mode [ 893.245401][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.852986][T10095] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 894.017299][T10095] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 894.022581][T10095] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 894.022618][T10095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 894.022641][T10095] usb 5-1: Product: syz [ 894.022657][T10095] usb 5-1: Manufacturer: syz [ 894.022674][T10095] usb 5-1: SerialNumber: syz [ 895.265618][ T8328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 895.866425][ T8328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.138105][ T8328] bond0 (unregistering): Released all slaves [ 896.751100][T10095] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 65 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 896.816203][T10095] usb 5-1: USB disconnect, device number 65 [ 896.841087][T10095] usblp0: removed [ 897.794868][T13308] random: crng reseeded on system resumption [ 900.730955][ T8328] hsr_slave_0: left promiscuous mode [ 900.766759][ T8328] hsr_slave_1: left promiscuous mode [ 900.767894][ T8328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.820373][ T8328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.193313][ T5145] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 901.347639][ T5145] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 901.351024][ T5145] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 901.351059][ T5145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 901.351082][ T5145] usb 6-1: Product: syz [ 901.351097][ T5145] usb 6-1: Manufacturer: syz [ 901.351110][ T5145] usb 6-1: SerialNumber: syz [ 901.539340][ T6051] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 901.718338][ T5145] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 901.722157][ T6051] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 901.722192][ T6051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.722223][ T6051] usb 5-1: Product: syz [ 901.722239][ T6051] usb 5-1: Manufacturer: syz [ 901.722255][ T6051] usb 5-1: SerialNumber: syz [ 901.790988][ T5145] usb 6-1: USB disconnect, device number 35 [ 901.939376][ T5145] usblp0: removed [ 902.227960][ T8328] team0 (unregistering): Port device team_slave_1 removed [ 902.369732][ T8328] team0 (unregistering): Port device team_slave_0 removed [ 902.446625][ T6051] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 902.446709][ T6051] cdc_ncm 5-1:1.0: bind() failure [ 903.393250][ T6051] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 903.393307][ T6051] cdc_ncm 5-1:1.1: bind() failure [ 903.460524][ T6051] usb 5-1: USB disconnect, device number 66 [ 903.753240][ T5145] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 904.020807][T13354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 905.018633][ T5145] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 905.018668][ T5145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.018690][ T5145] usb 2-1: Product: syz [ 905.018707][ T5145] usb 2-1: Manufacturer: syz [ 905.018723][ T5145] usb 2-1: SerialNumber: syz [ 907.296625][ T5145] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 907.314972][ T5145] cdc_ncm 2-1:1.0: bind() failure [ 907.376835][ T5145] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 907.376888][ T5145] cdc_ncm 2-1:1.1: bind() failure [ 907.524998][ T5145] usb 2-1: USB disconnect, device number 23 [ 907.695277][T12873] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 907.827551][T12873] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 907.830294][T12873] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 907.896292][T12873] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 907.899975][T12873] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 908.197490][T12873] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 908.255918][T12873] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 908.293245][ T6051] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 908.306149][T12873] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 908.473253][ T6051] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 908.481494][ T6051] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 908.481529][ T6051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 908.481552][ T6051] usb 5-1: Product: syz [ 908.481614][ T6051] usb 5-1: Manufacturer: syz [ 908.481670][ T6051] usb 5-1: SerialNumber: syz [ 909.339632][T12873] kthread_run failed with err -4 [ 909.449960][ T6051] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 909.465553][ T6051] usb 5-1: USB disconnect, device number 67 [ 909.501557][ T6051] usblp0: removed [ 911.622250][T10314] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 911.700032][T10314] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 911.720326][T10314] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 911.740882][T10314] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 911.742810][T10314] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 913.924982][T10314] Bluetooth: hci4: command tx timeout [ 914.363258][ T36] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 914.531841][ T36] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 914.531878][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 914.531908][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 914.531937][ T36] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 914.531980][ T36] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 914.532004][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.611493][ T36] usb 6-1: config 0 descriptor?? [ 914.612477][T13447] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 915.228738][T13447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.229527][T13447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.234807][T13447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.235487][T13447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.513764][ T36] usbhid 6-1:0.0: can't add hid device: -71 [ 915.513912][ T36] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 915.518649][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 915.555782][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 915.564937][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 915.570773][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 915.613641][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 915.622344][ T5967] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 915.635106][ T36] usb 6-1: USB disconnect, device number 36 [ 915.817424][ T5967] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 915.817447][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.817460][ T5967] usb 5-1: Product: syz [ 915.817477][ T5967] usb 5-1: Manufacturer: syz [ 915.817487][ T5967] usb 5-1: SerialNumber: syz [ 916.025725][T10314] Bluetooth: hci4: command tx timeout [ 916.956848][ T5967] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 916.956935][ T5967] cdc_ncm 5-1:1.0: bind() failure [ 916.968789][ T5967] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 916.968851][ T5967] cdc_ncm 5-1:1.1: bind() failure [ 916.987051][ T5967] usb 5-1: USB disconnect, device number 68 [ 917.250383][T13479] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 917.254376][T13479] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 918.090243][T10314] Bluetooth: hci0: command tx timeout [ 918.091184][T10314] Bluetooth: hci4: command tx timeout [ 919.333206][T13288] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 919.406536][ T5967] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 919.525915][T13288] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 919.525957][T13288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 919.525986][T13288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 919.526016][T13288] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 919.526073][T13288] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 919.526099][T13288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.604867][T13288] usb 2-1: config 0 descriptor?? [ 919.606532][T13502] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 919.607787][ T5967] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 919.639274][ T5967] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 919.639306][ T5967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 919.639325][ T5967] usb 6-1: Product: syz [ 919.639340][ T5967] usb 6-1: Manufacturer: syz [ 919.639352][ T5967] usb 6-1: SerialNumber: syz [ 919.999995][ T5967] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 920.089886][ T5967] usb 6-1: USB disconnect, device number 37 [ 920.164640][T10314] Bluetooth: hci4: command tx timeout [ 920.164680][T10314] Bluetooth: hci0: command tx timeout [ 920.202151][ T5967] usblp0: removed [ 920.301789][T13502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.303787][T13502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.307374][T13502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.308000][T13502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.433300][ T36] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 920.529054][T13288] usbhid 2-1:0.0: can't add hid device: -71 [ 920.529206][T13288] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 920.605553][ T36] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 920.605603][ T36] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 920.605625][ T36] usb 5-1: config 4 has no interface number 0 [ 920.605677][ T36] usb 5-1: config 4 interface 44 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 920.641812][ T36] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 920.641844][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.641864][ T36] usb 5-1: Product: syz [ 920.641878][ T36] usb 5-1: Manufacturer: syz [ 920.641892][ T36] usb 5-1: SerialNumber: syz [ 920.692134][T13288] usb 2-1: USB disconnect, device number 24 [ 920.907535][T13514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.908211][T13514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.152389][ T36] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 921.202512][ T36] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 921.205842][ T36] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 921.205915][ T36] usb 5-1: media controller created [ 921.209141][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 921.298499][ T36] DVB: Unable to find symbol dib7000p_attach() [ 921.298519][ T36] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 921.399822][ T5145] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 921.483970][T13419] chnl_net:caif_netlink_parms(): no params data found [ 921.527179][ T36] rc_core: IR keymap rc-dib0700-rc5 not found [ 921.527308][ T36] Registered IR keymap rc-empty [ 921.595164][T13532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 921.606267][T13532] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 921.785901][ T36] dvb-usb: could not initialize remote control. [ 921.785950][ T36] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 922.548075][ T59] Bluetooth: hci0: command tx timeout [ 922.601445][ T5145] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 922.601481][ T5145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.601502][ T5145] usb 6-1: Product: syz [ 922.601518][ T5145] usb 6-1: Manufacturer: syz [ 922.601534][ T5145] usb 6-1: SerialNumber: syz [ 922.848639][ T36] usb 5-1: USB disconnect, device number 69 [ 923.808256][ T5145] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 923.808352][ T5145] cdc_ncm 6-1:1.0: bind() failure [ 923.875072][ T36] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 923.966146][ T5145] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 923.966208][ T5145] cdc_ncm 6-1:1.1: bind() failure [ 923.998727][ T5145] usb 6-1: USB disconnect, device number 38 [ 924.278238][T13549] bridge0: entered promiscuous mode [ 924.278530][T13549] macsec1: entered promiscuous mode [ 924.580593][ T59] Bluetooth: hci0: command tx timeout [ 927.400499][T13419] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.400620][T13419] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.400827][T13419] bridge_slave_0: entered allmulticast mode [ 927.404668][T13419] bridge_slave_0: entered promiscuous mode [ 928.368041][T13419] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.368253][T13419] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.368465][T13419] bridge_slave_1: entered allmulticast mode [ 928.372170][T13419] bridge_slave_1: entered promiscuous mode [ 930.658887][T13419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.718712][T13419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.054932][T13419] team0: Port device team_slave_0 added [ 931.057731][T13465] chnl_net:caif_netlink_parms(): no params data found [ 931.097815][T13419] team0: Port device team_slave_1 added [ 931.203394][ T36] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 931.273518][ T8328] bridge_slave_1: left allmulticast mode [ 931.273543][ T8328] bridge_slave_1: left promiscuous mode [ 931.273767][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.335444][ T8328] bridge_slave_0: left allmulticast mode [ 931.335480][ T8328] bridge_slave_0: left promiscuous mode [ 931.335779][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.369799][ T36] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 931.369835][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.369859][ T36] usb 6-1: Product: syz [ 931.369873][ T36] usb 6-1: Manufacturer: syz [ 931.369889][ T36] usb 6-1: SerialNumber: syz [ 931.764147][ T8328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.845358][ T8328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 931.907487][ T8328] bond0 (unregistering): Released all slaves [ 931.929098][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.929273][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.044896][ T36] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 932.044993][ T36] cdc_ncm 6-1:1.0: bind() failure [ 932.076622][ T36] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 932.076674][ T36] cdc_ncm 6-1:1.1: bind() failure [ 932.100674][ T36] usb 6-1: USB disconnect, device number 39 [ 932.150808][T13419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.150827][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.150854][T13419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.242936][T13419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.242956][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.242987][T13419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.971829][ T8328] hsr_slave_0: left promiscuous mode [ 933.064940][ T8328] hsr_slave_1: left promiscuous mode [ 933.070233][ T8328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.204007][T10314] Bluetooth: hci5: command 0x1003 tx timeout [ 933.244579][ T59] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 933.416137][ T8328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.004865][ T8328] team0 (unregistering): Port device team_slave_1 removed [ 941.063996][ T8328] team0 (unregistering): Port device team_slave_0 removed [ 941.631229][T13465] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.632951][T13465] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.652100][T13465] bridge_slave_0: entered allmulticast mode [ 941.672856][T13465] bridge_slave_0: entered promiscuous mode [ 941.966510][T13465] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.966653][T13465] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.966844][T13465] bridge_slave_1: entered allmulticast mode [ 941.970784][T13465] bridge_slave_1: entered promiscuous mode [ 941.989241][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 942.021280][T13419] hsr_slave_0: entered promiscuous mode [ 942.022767][T13419] hsr_slave_1: entered promiscuous mode [ 942.037111][T13419] debugfs: 'hsr0' already exists in 'hsr' [ 942.037142][T13419] Cannot create hsr debugfs directory [ 942.128670][T13465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.190591][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 942.208954][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 942.208991][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 942.209014][ T9] usb 2-1: Product: syz [ 942.209029][ T9] usb 2-1: Manufacturer: syz [ 942.209045][ T9] usb 2-1: SerialNumber: syz [ 942.275711][T13465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.967894][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 942.973232][ T5905] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 943.000151][ T9] usb 2-1: USB disconnect, device number 25 [ 943.059347][ T9] usblp0: removed [ 943.183327][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 943.234253][T13644] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 943.234274][T13644] IPv6: NLM_F_CREATE should be set when creating new route [ 943.286047][ T5905] usb 6-1: unable to get BOS descriptor or descriptor too short [ 943.287204][ T5905] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 943.287241][ T5905] usb 6-1: can't read configurations, error -71 [ 943.289883][T13465] team0: Port device team_slave_0 added [ 943.326968][T13465] team0: Port device team_slave_1 added [ 943.456884][T13465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.456898][T13465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.456916][T13465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.480232][T13465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.480250][T13465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.480277][T13465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.155403][T13465] hsr_slave_0: entered promiscuous mode [ 944.160309][T13465] hsr_slave_1: entered promiscuous mode [ 944.179312][T13465] debugfs: 'hsr0' already exists in 'hsr' [ 944.179344][T13465] Cannot create hsr debugfs directory [ 947.165104][T13288] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 947.324514][T13288] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 947.354245][T13288] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 947.354278][T13288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 947.354299][T13288] usb 2-1: Product: syz [ 947.354315][T13288] usb 2-1: Manufacturer: syz [ 947.354331][T13288] usb 2-1: SerialNumber: syz [ 947.677841][T13288] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 947.892509][ T5967] usb 2-1: USB disconnect, device number 26 [ 948.096350][ T5967] usblp0: removed [ 948.713262][T13288] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 948.866552][T13288] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 948.866592][T13288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 948.866622][T13288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 948.866651][T13288] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 948.866698][T13288] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 948.866724][T13288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.021812][T13288] usb 6-1: config 0 descriptor?? [ 949.024691][T13711] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 950.641081][T13288] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 950.641122][T13288] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 950.641149][T13288] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 950.641176][T13288] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 950.641213][T13288] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 950.641239][T13288] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 950.641265][T13288] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 950.641290][T13288] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 950.641316][T13288] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 950.641342][T13288] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 950.805772][T13711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.812818][T13711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.821876][T13711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.822457][T13711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.957558][T13288] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 951.066823][ T5967] usb 6-1: USB disconnect, device number 42 [ 951.240307][T13736] fido_id[13736]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 954.033492][ T36] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 954.216485][ T36] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 954.257787][ T36] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 954.257811][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 954.257825][ T36] usb 6-1: Product: syz [ 954.257834][ T36] usb 6-1: Manufacturer: syz [ 954.257843][ T36] usb 6-1: SerialNumber: syz [ 954.978980][ T36] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 955.027145][ T36] usb 6-1: USB disconnect, device number 43 [ 955.068152][ T36] usblp0: removed [ 955.284056][ T5145] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 955.424176][ T8328] bridge_slave_1: left allmulticast mode [ 955.424213][ T8328] bridge_slave_1: left promiscuous mode [ 955.424517][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.437734][ T5145] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 955.437773][ T5145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 955.437801][ T5145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 955.437828][ T5145] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 955.437872][ T5145] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 955.437896][ T5145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.453728][ T5145] usb 5-1: config 0 descriptor?? [ 955.455022][T13773] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 955.566200][ T8328] bridge_slave_0: left allmulticast mode [ 955.566314][ T8328] bridge_slave_0: left promiscuous mode [ 955.566844][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.930974][ T5145] hid_parser_main: 3 callbacks suppressed [ 955.931004][ T5145] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 955.931037][ T5145] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 955.931064][ T5145] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 955.931092][ T5145] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 955.931118][ T5145] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 955.931145][ T5145] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 955.931172][ T5145] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 955.931197][ T5145] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 955.931233][ T5145] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 955.931257][ T5145] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 956.001803][ T5145] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 956.276251][T13773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.278604][T13773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.309315][T13773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.800887][T13773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.022684][T10095] usb 5-1: USB disconnect, device number 70 [ 957.318697][ T8328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 957.444236][ T8328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.545004][ T8328] bond0 (unregistering): Released all slaves [ 957.588589][ T5479] 8021q: adding VLAN 0 to HW filter on device eth9 [ 958.994396][T13812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 959.037315][T13812] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 960.026835][ T8328] hsr_slave_0: left promiscuous mode [ 960.065130][ T8328] hsr_slave_1: left promiscuous mode [ 960.066406][ T8328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.083494][ T36] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 960.096147][ T8328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.248260][ T36] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 960.266482][ T36] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 960.266518][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 960.266542][ T36] usb 2-1: Product: syz [ 960.266558][ T36] usb 2-1: Manufacturer: syz [ 960.266574][ T36] usb 2-1: SerialNumber: syz [ 960.626500][ T36] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 960.655315][ T36] usb 2-1: USB disconnect, device number 27 [ 960.678638][ T36] usblp0: removed [ 960.876957][ T8328] team0 (unregistering): Port device team_slave_1 removed [ 960.944228][ T8328] team0 (unregistering): Port device team_slave_0 removed [ 961.683198][ T36] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 962.126658][ T36] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 962.126768][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 962.126867][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 962.126970][ T36] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 962.127113][ T36] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 962.127207][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.318245][ T36] usb 2-1: config 0 descriptor?? [ 962.522305][T13824] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 962.964895][ T36] hid_parser_main: 3 callbacks suppressed [ 962.964915][ T36] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 962.964935][ T36] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 962.964952][ T36] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 962.964967][ T36] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 962.964982][ T36] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 962.964998][ T36] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 962.965013][ T36] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 962.965028][ T36] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 962.965043][ T36] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 962.965059][ T36] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 963.554634][T13824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.561222][T13824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.580219][T13824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.580873][T13824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.641520][ T36] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 963.832226][T10095] usb 2-1: USB disconnect, device number 28 [ 964.035360][T13849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 964.060123][T13852] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 965.044718][ T36] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 965.226390][ T36] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 965.248256][ T36] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 965.248293][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 965.248318][ T36] usb 5-1: Product: syz [ 965.248334][ T36] usb 5-1: Manufacturer: syz [ 965.248351][ T36] usb 5-1: SerialNumber: syz [ 965.594448][ T36] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 71 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 965.607122][ T36] usb 5-1: USB disconnect, device number 71 [ 965.640395][ T36] usblp0: removed [ 966.195729][T13419] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 966.700883][T13895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 966.734625][T13895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 967.714435][T13899] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 967.782185][T13419] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 967.840248][T13419] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 967.961420][T13419] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 967.962801][T13419] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 969.190224][T13419] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 969.207036][T13419] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 969.473574][T13419] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 970.480473][T13419] kthread_run failed with err -4 [ 971.791736][T13465] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 971.831441][T10314] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 971.878175][T10314] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 971.900012][T10314] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 971.916329][T10314] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 971.943543][T10314] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 972.356799][T13465] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 972.371618][T13465] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 972.432705][T13465] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 972.445671][T13465] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 972.532629][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 972.641463][T13465] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 972.814279][T13949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 972.820325][T13949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 973.653167][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 973.674541][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 973.674573][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 973.674593][ T9] usb 5-1: Product: syz [ 973.674607][ T9] usb 5-1: Manufacturer: syz [ 973.674621][ T9] usb 5-1: SerialNumber: syz [ 973.945345][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 72 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 973.966699][ T9] usb 5-1: USB disconnect, device number 72 [ 973.991348][ T9] usblp0: removed [ 974.031226][T10314] Bluetooth: hci5: command tx timeout [ 974.214457][T13953] netlink: 'syz.5.2361': attribute type 1 has an invalid length. [ 974.214547][T13953] netlink: 'syz.5.2361': attribute type 4 has an invalid length. [ 974.214680][T13953] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2361'. [ 975.194529][T13465] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 975.218534][T13465] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 976.083139][T10314] Bluetooth: hci5: command tx timeout [ 976.510020][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 977.452559][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 977.461578][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 977.464142][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 977.464937][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 979.318807][T10314] Bluetooth: hci5: command tx timeout [ 979.895490][T10314] Bluetooth: hci0: command tx timeout [ 980.205570][ T36] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 980.964982][ T36] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 981.014436][ T36] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 981.014472][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 981.014487][ T36] usb 6-1: Product: syz [ 981.014496][ T36] usb 6-1: Manufacturer: syz [ 981.014504][ T36] usb 6-1: SerialNumber: syz [ 981.324070][ T36] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 981.360094][ T36] usb 6-1: USB disconnect, device number 44 [ 981.363196][T10314] Bluetooth: hci5: command tx timeout [ 981.408092][ T36] usblp0: removed [ 981.942033][T10314] Bluetooth: hci0: command tx timeout [ 983.455767][T14015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 984.131362][ T59] Bluetooth: hci0: command tx timeout [ 984.553215][ T6051] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 984.675820][T13941] chnl_net:caif_netlink_parms(): no params data found [ 984.729927][ T6051] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 984.729959][ T6051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 984.729976][ T6051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 984.729993][ T6051] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 984.730020][ T6051] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 984.730034][ T6051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.809652][ T6051] usb 6-1: config 0 descriptor?? [ 984.811738][T14018] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 984.943308][ T5905] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 985.105014][ T5905] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 985.111679][ T5905] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 985.111701][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 985.111715][ T5905] usb 5-1: Product: syz [ 985.111723][ T5905] usb 5-1: Manufacturer: syz [ 985.111732][ T5905] usb 5-1: SerialNumber: syz [ 985.478002][T14018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.480101][T14018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.504059][T14018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.505569][T14018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.556405][ T5905] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 985.572523][ T5905] usb 5-1: USB disconnect, device number 73 [ 985.641012][ T5905] usblp0: removed [ 985.715290][ T6051] usbhid 6-1:0.0: can't add hid device: -71 [ 985.715414][ T6051] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 985.756999][ T6051] usb 6-1: USB disconnect, device number 45 [ 985.848538][T13941] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.848704][T13941] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.849001][T13941] bridge_slave_0: entered allmulticast mode [ 985.865026][T13941] bridge_slave_0: entered promiscuous mode [ 986.323271][ T59] Bluetooth: hci0: command tx timeout [ 986.909434][T13941] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.909580][T13941] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.909752][T13941] bridge_slave_1: entered allmulticast mode [ 986.914310][T13941] bridge_slave_1: entered promiscuous mode [ 987.103560][ T3624] bridge_slave_1: left allmulticast mode [ 987.103598][ T3624] bridge_slave_1: left promiscuous mode [ 987.103907][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.177226][ T3624] bridge_slave_0: left allmulticast mode [ 987.177262][ T3624] bridge_slave_0: left promiscuous mode [ 987.189880][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.454077][ T3624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 988.604730][ T3624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 988.917414][ T3624] bond0 (unregistering): Released all slaves [ 989.404420][T13941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.521284][T13941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.730866][T13963] chnl_net:caif_netlink_parms(): no params data found [ 989.933917][ T3624] hsr_slave_0: left promiscuous mode [ 989.946258][ T5934] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 990.328645][ T3624] hsr_slave_1: left promiscuous mode [ 990.564116][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.604119][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.725647][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 990.725687][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 990.725714][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 990.725731][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 990.725758][ T5934] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 990.725772][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.758830][ T5934] usb 2-1: config 0 descriptor?? [ 990.760002][T14066] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 991.409749][T14066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.411013][T14066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.437994][T14066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.617509][T14066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.942877][ T5934] usbhid 2-1:0.0: can't add hid device: -71 [ 991.943294][ T5934] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 991.981987][ T5934] usb 2-1: USB disconnect, device number 29 [ 992.564954][ T3624] team0 (unregistering): Port device team_slave_1 removed [ 992.880556][ T3624] team0 (unregistering): Port device team_slave_0 removed [ 993.370427][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.370511][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.461802][T13941] team0: Port device team_slave_0 added [ 993.539138][T13941] team0: Port device team_slave_1 added [ 993.777194][T13941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.777213][T13941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.777241][T13941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.889622][T13941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.889643][T13941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.889755][T13941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.220105][ T59] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 994.659516][T13963] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.659683][T13963] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.659878][T13963] bridge_slave_0: entered allmulticast mode [ 994.666936][T13963] bridge_slave_0: entered promiscuous mode [ 994.786809][T13963] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.787039][T13963] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.787260][T13963] bridge_slave_1: entered allmulticast mode [ 994.820445][T13963] bridge_slave_1: entered promiscuous mode [ 995.119545][T13941] hsr_slave_0: entered promiscuous mode [ 995.121271][T13941] hsr_slave_1: entered promiscuous mode [ 995.122473][T13941] debugfs: 'hsr0' already exists in 'hsr' [ 995.122500][T13941] Cannot create hsr debugfs directory [ 995.195809][T13963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.239454][T13963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.388484][T13963] team0: Port device team_slave_0 added [ 995.418594][T13963] team0: Port device team_slave_1 added [ 995.660410][T13963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.660430][T13963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.660461][T13963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.664407][T13963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.664423][T13963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.664450][T13963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.743189][ T5967] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 997.777521][T13963] hsr_slave_0: entered promiscuous mode [ 997.782627][T13963] hsr_slave_1: entered promiscuous mode [ 997.787397][T13963] debugfs: 'hsr0' already exists in 'hsr' [ 997.787427][T13963] Cannot create hsr debugfs directory [ 997.967225][ T5967] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 997.967266][ T5967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 997.967296][ T5967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 997.967325][ T5967] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 997.967371][ T5967] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 997.967397][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.982796][ T5967] usb 2-1: config 0 descriptor?? [ 997.988108][T14141] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 999.029400][ T5479] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1000.933432][T14156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.981800][T14156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.044709][ T5967] usbhid 2-1:0.0: can't add hid device: -71 [ 1001.044790][ T5967] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1001.065888][ T5967] usb 2-1: USB disconnect, device number 30 [ 1003.405853][ T5145] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1003.555404][ T5145] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1003.555444][ T5145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1003.555476][ T5145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1003.555508][ T5145] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1003.555631][ T5145] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1003.555657][ T5145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.640186][ T5145] usb 2-1: config 0 descriptor?? [ 1003.641139][T14180] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1004.121544][ T5145] hid_parser_main: 5 callbacks suppressed [ 1004.121572][ T5145] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1004.121604][ T5145] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1004.121630][ T5145] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1004.121655][ T5145] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1004.121679][ T5145] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1004.121704][ T5145] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1004.121728][ T5145] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1004.121752][ T5145] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1004.121776][ T5145] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1004.121800][ T5145] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1004.247185][ T5145] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1004.475525][T14193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.476264][T14193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.481345][T14193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.482036][T14193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.719305][ T5905] usb 2-1: USB disconnect, device number 31 [ 1006.983856][ T5905] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1007.203985][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1007.204024][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1007.204053][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1007.204082][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1007.204131][ T5905] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1007.204155][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.247648][ T5905] usb 5-1: config 0 descriptor?? [ 1007.248780][T14216] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1007.941654][T14216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.942553][T14216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.943763][ T5905] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1007.949405][T14216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.959682][T14216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.192354][ T5905] usb 5-1: USB disconnect, device number 74 [ 1009.229413][ T3624] bridge_slave_1: left allmulticast mode [ 1009.229449][ T3624] bridge_slave_1: left promiscuous mode [ 1009.438412][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.518315][ T3624] bridge_slave_0: left allmulticast mode [ 1009.518349][ T3624] bridge_slave_0: left promiscuous mode [ 1009.518752][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.225965][ T3624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1012.108782][ T3624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1012.202470][ T3624] bond0 (unregistering): Released all slaves [ 1012.283793][ T5479] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1013.653272][ T3624] hsr_slave_0: left promiscuous mode [ 1013.701963][ T3624] hsr_slave_1: left promiscuous mode [ 1013.703872][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1013.745074][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.464572][T14317] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2467'. [ 1016.424500][ T3624] team0 (unregistering): Port device team_slave_1 removed [ 1016.486145][ T3624] team0 (unregistering): Port device team_slave_0 removed [ 1016.877939][T14325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1018.543186][T10806] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1018.694730][T10806] usb 5-1: Using ep0 maxpacket: 16 [ 1018.700418][T10806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.700475][T10806] usb 5-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 1018.700501][T10806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.799976][T10806] usb 5-1: config 0 descriptor?? [ 1019.261015][T14345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1019.266759][T14345] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1020.500114][T10806] usbhid 5-1:0.0: can't add hid device: -71 [ 1020.500268][T10806] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1020.575930][T10806] usb 5-1: USB disconnect, device number 75 [ 1022.936793][T14381] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2479'. [ 1022.964354][T14380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1025.382598][T13941] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1025.495555][T13941] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1025.650089][T13941] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1025.730899][T13941] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1025.751893][T13941] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1025.951994][T13941] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1026.154736][T13941] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1026.208491][T13941] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1026.419805][T13963] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1026.451676][T13963] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1026.471756][T13963] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1026.496310][T13963] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1026.498505][T13963] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1026.784986][T13963] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1027.084183][T13963] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1027.539146][T13963] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1029.468152][T13941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.722432][T14457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1029.790898][T14457] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1030.747920][T13941] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.805503][ T8316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.805588][ T8316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.207767][ T1690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.207921][ T1690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.476912][T13963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.642090][T13963] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.766916][T11405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.767072][T11405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.920747][ T1690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.920990][ T1690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.249615][T14482] random: crng reseeded on system resumption [ 1033.871367][T10314] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1033.952212][T10314] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1033.963949][T10314] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1033.968174][T10314] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1033.972332][T10314] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1034.063216][ T36] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1034.463397][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 1034.599257][T14492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1034.645483][T14492] IPv6: NLM_F_CREATE should be set when creating new route [ 1034.679351][ T36] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1034.680426][ T36] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1034.680466][ T36] usb 2-1: can't read configurations, error -71 [ 1035.323475][T13963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.827373][T13288] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1035.996401][T13288] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1036.000622][T13288] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1036.000653][T13288] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1036.000674][T13288] usb 6-1: Product: syz [ 1036.000688][T13288] usb 6-1: Manufacturer: syz [ 1036.000702][T13288] usb 6-1: SerialNumber: syz [ 1036.137331][ T59] Bluetooth: hci4: command tx timeout [ 1036.391437][T13288] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1036.424100][T13288] usb 6-1: USB disconnect, device number 46 [ 1036.428318][T13288] usblp0: removed [ 1037.141705][T14495] chnl_net:caif_netlink_parms(): no params data found [ 1037.335578][T14530] binder: 14529:14530 ioctl c0306201 0 returned -14 [ 1037.861920][T14541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1037.903586][T14541] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1038.861641][ T59] Bluetooth: hci4: command tx timeout [ 1039.200597][T10314] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1039.251476][T10314] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1039.265745][T10314] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1039.284274][T10314] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1039.285777][T10314] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1040.885212][ T59] Bluetooth: hci4: command tx timeout [ 1041.437376][T14564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1041.573394][ T6051] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1041.767973][ T6051] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1041.772065][ T6051] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1041.772099][ T6051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1041.772113][ T6051] usb 5-1: Product: syz [ 1041.772122][ T6051] usb 5-1: Manufacturer: syz [ 1041.772141][ T6051] usb 5-1: SerialNumber: syz [ 1041.842332][T14495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.849511][T14495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.849859][T14495] bridge_slave_0: entered allmulticast mode [ 1041.870283][T14495] bridge_slave_0: entered promiscuous mode [ 1041.955227][T14495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.955370][T14495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.956012][T14495] bridge_slave_1: entered allmulticast mode [ 1041.960763][T14495] bridge_slave_1: entered promiscuous mode [ 1042.028717][ T6051] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 76 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1042.059588][ T6051] usb 5-1: USB disconnect, device number 76 [ 1042.077015][ T6051] usblp0: removed [ 1042.179180][T14495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.232016][T14495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.389440][T14495] team0: Port device team_slave_0 added [ 1042.445843][T14495] team0: Port device team_slave_1 added [ 1042.483190][ T59] Bluetooth: hci0: command tx timeout [ 1042.963622][ T59] Bluetooth: hci4: command tx timeout [ 1043.157459][T14495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.157479][T14495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1043.157506][T14495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.221304][T14495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.221323][T14495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1043.221350][T14495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.937257][T14495] hsr_slave_0: entered promiscuous mode [ 1043.938795][T14495] hsr_slave_1: entered promiscuous mode [ 1043.939909][T14495] debugfs: 'hsr0' already exists in 'hsr' [ 1043.939938][T14495] Cannot create hsr debugfs directory [ 1044.053173][ T6051] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1044.184932][ T1028] bridge_slave_1: left allmulticast mode [ 1044.184969][ T1028] bridge_slave_1: left promiscuous mode [ 1044.185393][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.213262][ T6051] usb 6-1: Using ep0 maxpacket: 32 [ 1044.242222][T14579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1044.273872][ T6051] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1044.276191][ T6051] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1044.276246][ T6051] usb 6-1: can't read configurations, error -71 [ 1044.339593][ T1028] bridge_slave_0: left allmulticast mode [ 1044.339625][ T1028] bridge_slave_0: left promiscuous mode [ 1044.339871][ T1028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.565294][ T59] Bluetooth: hci0: command tx timeout [ 1045.175308][ T1028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.213937][ T1028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1045.245565][ T1028] bond0 (unregistering): Released all slaves [ 1045.815362][T14539] chnl_net:caif_netlink_parms(): no params data found [ 1046.013230][ T6051] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1046.013504][ T1028] hsr_slave_0: left promiscuous mode [ 1046.036746][ T1028] hsr_slave_1: left promiscuous mode [ 1046.037601][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.056034][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.169665][ T6051] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1046.188584][ T6051] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1046.188614][ T6051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1046.188627][ T6051] usb 2-1: Product: syz [ 1046.188636][ T6051] usb 2-1: Manufacturer: syz [ 1046.188645][ T6051] usb 2-1: SerialNumber: syz [ 1046.456709][ T6051] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1046.471294][ T6051] usb 2-1: USB disconnect, device number 34 [ 1046.550430][ T6051] usblp0: removed [ 1046.557551][ T1028] team0 (unregistering): Port device team_slave_1 removed [ 1046.585092][ T1028] team0 (unregistering): Port device team_slave_0 removed [ 1046.747141][ T59] Bluetooth: hci0: command tx timeout [ 1047.243101][T10806] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1047.295284][T14539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.295663][T14539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.295916][T14539] bridge_slave_0: entered allmulticast mode [ 1047.299316][T14539] bridge_slave_0: entered promiscuous mode [ 1047.358133][T14539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.358290][T14539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.358530][T14539] bridge_slave_1: entered allmulticast mode [ 1047.362437][T14539] bridge_slave_1: entered promiscuous mode [ 1047.553456][T10806] usb 6-1: Using ep0 maxpacket: 8 [ 1047.570429][T10806] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1047.570466][T10806] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1047.570494][T10806] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1047.570520][T10806] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1047.570567][T10806] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1047.570591][T10806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.976089][T14618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1048.023290][T14618] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1048.804565][ T59] Bluetooth: hci0: command tx timeout [ 1048.884355][T10806] usb 6-1: GET_CAPABILITIES returned 0 [ 1048.884418][T10806] usbtmc 6-1:16.0: can't read capabilities [ 1049.194120][T10806] usb 6-1: USB disconnect, device number 49 [ 1049.445659][T14539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.451060][T14539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.543392][T14539] team0: Port device team_slave_0 added [ 1049.566102][T14539] team0: Port device team_slave_1 added [ 1049.829096][T14539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.829117][T14539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.829156][T14539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.842879][T14539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.842896][T14539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.842923][T14539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.843236][T10095] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1049.996288][T10095] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1049.996313][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1049.996330][T10095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1049.996347][T10095] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1049.996373][T10095] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1049.996389][T10095] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.074796][T10095] usb 5-1: config 0 descriptor?? [ 1050.075585][T14626] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1050.547503][T10095] hid_parser_main: 20 callbacks suppressed [ 1050.547535][T10095] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1050.547572][T10095] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1050.547599][T10095] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1050.547625][T10095] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1050.547651][T10095] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1050.547677][T10095] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1050.547701][T10095] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1050.547725][T10095] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1050.547751][T10095] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1050.547776][T10095] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1050.628518][T10095] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1051.016123][T10095] usb 5-1: USB disconnect, device number 77 [ 1051.209890][T14637] fido_id[14637]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1051.341580][T14539] hsr_slave_0: entered promiscuous mode [ 1051.342571][T14539] hsr_slave_1: entered promiscuous mode [ 1051.348551][T14539] debugfs: 'hsr0' already exists in 'hsr' [ 1051.348580][T14539] Cannot create hsr debugfs directory [ 1051.493214][T10095] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1051.654992][T10095] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1051.675474][T10095] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1051.675571][T10095] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1051.675592][T10095] usb 6-1: Product: syz [ 1051.675606][T10095] usb 6-1: Manufacturer: syz [ 1051.675620][T10095] usb 6-1: SerialNumber: syz [ 1052.047283][T10095] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1052.074384][T10095] usb 6-1: USB disconnect, device number 50 [ 1052.121997][T10095] usblp0: removed [ 1054.810611][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.810695][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.283993][ T6051] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1055.468573][ T6051] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1055.489602][ T6051] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1055.489639][ T6051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1055.489663][ T6051] usb 2-1: Product: syz [ 1055.489679][ T6051] usb 2-1: Manufacturer: syz [ 1055.489694][ T6051] usb 2-1: SerialNumber: syz [ 1055.764033][T10314] Bluetooth: hci5: command 0x1003 tx timeout [ 1055.770245][ T59] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1055.987741][ T6051] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1056.067042][ T6051] usb 2-1: USB disconnect, device number 35 [ 1056.124790][ T6051] usblp0: removed [ 1056.959000][T14495] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1057.031456][T14495] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1057.034071][T14495] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1057.078770][T14495] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1057.092173][T14495] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1057.245473][T14495] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1057.261950][T14495] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1057.332332][T14495] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1058.555871][T14709] bridge0: entered promiscuous mode [ 1058.555997][T14709] macsec1: entered promiscuous mode [ 1058.803179][T10806] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1058.965823][T10806] usb 2-1: Using ep0 maxpacket: 16 [ 1058.972237][T10806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.972294][T10806] usb 2-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 1058.972321][T10806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.376038][T10806] usb 2-1: config 0 descriptor?? [ 1060.047288][T10806] usbhid 2-1:0.0: can't add hid device: -71 [ 1060.047431][T10806] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1060.077954][T10806] usb 2-1: USB disconnect, device number 36 [ 1060.147891][ T1028] bridge_slave_1: left allmulticast mode [ 1060.147928][ T1028] bridge_slave_1: left promiscuous mode [ 1060.148235][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.153637][T13288] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1060.254982][ T1028] bridge_slave_0: left allmulticast mode [ 1060.255005][ T1028] bridge_slave_0: left promiscuous mode [ 1060.255386][ T1028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.303443][T13288] usb 6-1: Using ep0 maxpacket: 8 [ 1060.306570][T13288] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1060.306604][T13288] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1060.306620][T13288] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1060.306635][T13288] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1060.306662][T13288] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1060.306677][T13288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.581237][T13288] usb 6-1: GET_CAPABILITIES returned 0 [ 1060.581288][T13288] usbtmc 6-1:16.0: can't read capabilities [ 1060.824067][T13288] usb 6-1: USB disconnect, device number 51 [ 1060.833112][T10806] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1060.880951][ T56] Bluetooth: hci5: Frame reassembly failed (-84) [ 1061.023401][T10806] usb 5-1: Using ep0 maxpacket: 32 [ 1061.047362][T14735] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1061.047395][T14735] IPv6: NLM_F_CREATE should be set when creating new route [ 1061.075777][T10806] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1061.077136][T10806] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1061.077386][T10806] usb 5-1: can't read configurations, error -71 [ 1061.367740][ T1028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1061.454217][ T1028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.506785][ T1028] bond0 (unregistering): Released all slaves [ 1061.677472][T14495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.884572][ T59] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1063.857160][ T1028] hsr_slave_0: left promiscuous mode [ 1064.174316][ T1028] hsr_slave_1: left promiscuous mode [ 1064.175719][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1064.264908][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.044036][ T1028] team0 (unregistering): Port device team_slave_1 removed [ 1067.114013][ T1028] team0 (unregistering): Port device team_slave_0 removed [ 1067.354814][ T5479] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1068.518802][T14495] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.546403][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.546739][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.560650][T14817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1068.574912][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.575139][ T8328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.833155][ T36] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1069.988921][ T36] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1069.988958][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.988979][ T36] usb 6-1: Product: syz [ 1069.988995][ T36] usb 6-1: Manufacturer: syz [ 1069.989010][ T36] usb 6-1: SerialNumber: syz [ 1070.663391][ T36] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1070.663487][ T36] cdc_ncm 6-1:1.0: bind() failure [ 1070.731207][ T36] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1070.731258][ T36] cdc_ncm 6-1:1.1: bind() failure [ 1070.855946][ T36] usb 6-1: USB disconnect, device number 52 [ 1074.155498][T14539] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1074.198506][T14539] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1074.341328][T14539] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1074.532097][T14539] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1074.547539][T14539] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1074.677965][T14539] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1074.685929][T14539] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1074.789736][T14539] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1074.807447][T14495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1076.698245][T14495] veth0_vlan: entered promiscuous mode [ 1076.716004][T14539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.917869][T14495] veth1_vlan: entered promiscuous mode [ 1078.956856][T14539] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.010023][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.011765][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.074992][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.075165][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.377793][T14495] veth0_macvtap: entered promiscuous mode [ 1079.452576][T14495] veth1_macvtap: entered promiscuous mode [ 1079.595626][T14495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.602662][ T59] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 1079.739919][T14495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.811053][ T66] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.811113][ T66] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.811153][ T66] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.811194][ T66] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.443921][ T9138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.443945][ T9138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.708378][T14539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.243348][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.243372][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.321687][T14539] veth0_vlan: entered promiscuous mode [ 1083.378016][T14539] veth1_vlan: entered promiscuous mode [ 1083.719736][T14539] veth0_macvtap: entered promiscuous mode [ 1083.753342][T14539] veth1_macvtap: entered promiscuous mode [ 1083.903836][T14539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.000352][T14539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.342912][ T40] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.343642][ T40] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.343689][ T40] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.343726][ T40] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.882922][ T36] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1085.287883][ T36] usb 8-1: Using ep0 maxpacket: 32 [ 1085.292931][ T36] usb 8-1: config 139 has an invalid interface number: 49 but max is 0 [ 1085.296459][ T36] usb 8-1: config 139 has no interface number 0 [ 1085.296509][ T36] usb 8-1: config 139 interface 49 has no altsetting 0 [ 1085.308084][ T36] usb 8-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 1085.308127][ T36] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.308146][ T36] usb 8-1: Product: syz [ 1085.308160][ T36] usb 8-1: Manufacturer: syz [ 1085.308173][ T36] usb 8-1: SerialNumber: syz [ 1085.854089][ T36] radio-usb-si4713 8-1:139.49: Si4713 development board discovered: (10C4:8244) [ 1085.932935][ T36] radio-usb-si4713 8-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 1085.933865][ T36] usbhid 8-1:139.49: couldn't find an input interrupt endpoint [ 1085.936408][ T8328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.936450][ T8328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.012656][ T36] usb 8-1: USB disconnect, device number 2 [ 1086.452000][T14991] 9pnet_virtio: no channels available for device syz [ 1088.054766][ T8323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.054793][ T8323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.923868][ T36] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1091.526725][ T36] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1091.526762][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.640508][ T36] usb 2-1: config 0 descriptor?? [ 1091.673605][ T36] cp210x 2-1:0.0: cp210x converter detected [ 1091.914017][ T36] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1091.914053][ T36] cp210x 2-1:0.0: querying part number failed [ 1092.018250][ T36] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1092.053201][T15023] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2661'. [ 1093.515591][T14507] usb 2-1: USB disconnect, device number 37 [ 1093.590201][T10314] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1093.802134][T10314] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1093.919904][T10314] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1094.071666][T10314] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1094.228740][T10314] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1095.397991][T14507] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1095.399082][T14507] cp210x 2-1:0.0: device disconnected [ 1096.669759][ T59] Bluetooth: hci5: command tx timeout [ 1097.396301][T15055] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.2672'. [ 1098.723879][ T59] Bluetooth: hci5: command tx timeout [ 1098.912902][ T1028] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1098.918139][ T1028] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.263156][T13288] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1100.539172][T13288] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1100.539208][T13288] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.539229][T13288] usb 8-1: Product: syz [ 1100.539245][T13288] usb 8-1: Manufacturer: syz [ 1100.539260][T13288] usb 8-1: SerialNumber: syz [ 1101.230705][ T59] Bluetooth: hci5: command tx timeout [ 1101.575147][T15087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1101.931058][T13288] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS [ 1101.931165][T13288] cdc_ncm 8-1:1.0: bind() failure [ 1101.953591][T15092] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2684'. [ 1102.008759][T13288] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1102.008811][T13288] cdc_ncm 8-1:1.1: bind() failure [ 1102.021454][T13288] usb 8-1: USB disconnect, device number 3 [ 1102.308984][ T1028] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.309012][ T1028] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.283788][ T59] Bluetooth: hci5: command tx timeout [ 1103.302683][ T1028] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.302712][ T1028] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.190865][T15038] chnl_net:caif_netlink_parms(): no params data found [ 1105.668305][ T1028] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1105.668333][ T1028] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.683166][T13288] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1105.943338][T13288] usb 8-1: Using ep0 maxpacket: 32 [ 1106.837467][T15113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1106.837489][T15113] IPv6: NLM_F_CREATE should be set when creating new route [ 1106.902279][T13288] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1106.912068][T13288] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1106.912107][T13288] usb 8-1: can't read configurations, error -71 [ 1107.670340][T15038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.692123][T15038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.692310][T15038] bridge_slave_0: entered allmulticast mode [ 1107.725652][T15038] bridge_slave_0: entered promiscuous mode [ 1107.729733][T15038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.730053][T15038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.730296][T15038] bridge_slave_1: entered allmulticast mode [ 1107.783587][T15038] bridge_slave_1: entered promiscuous mode [ 1108.080648][T15038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1108.161361][T15038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1108.764981][T15139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1108.833040][T15139] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1108.887386][T15139] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1109.924970][T15038] team0: Port device team_slave_0 added [ 1109.977955][T15038] team0: Port device team_slave_1 added [ 1110.506205][T15154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1110.513138][T15154] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1110.846039][T15155] random: crng reseeded on system resumption [ 1113.738951][T15166] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2705'. [ 1114.710803][T15174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1114.716966][T15174] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1114.720149][T15174] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1114.723313][T15172] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1114.729003][T15172] iommufd_mock iommufd_mock3: Adding to iommu group 3 [ 1114.951296][T15038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.951310][T15038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.951332][T15038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.978482][T15038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.978499][T15038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.978526][T15038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1116.073167][ T5926] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1116.310486][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.310569][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.374108][T15038] hsr_slave_0: entered promiscuous mode [ 1116.380315][T15038] hsr_slave_1: entered promiscuous mode [ 1116.381032][T15038] debugfs: 'hsr0' already exists in 'hsr' [ 1116.381066][T15038] Cannot create hsr debugfs directory [ 1116.424562][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 1116.451320][T15180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1116.478562][ T5926] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1116.479686][ T5926] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1116.479726][ T5926] usb 2-1: can't read configurations, error -71 [ 1121.303500][ T1028] bridge_slave_1: left allmulticast mode [ 1121.303532][ T1028] bridge_slave_1: left promiscuous mode [ 1121.303849][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.524745][ T1028] bridge_slave_0: left allmulticast mode [ 1121.524776][ T1028] bridge_slave_0: left promiscuous mode [ 1121.524971][ T1028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.125822][T15219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1122.320558][T15224] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1124.173915][ T1028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1124.214103][ T1028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1124.236513][ T1028] bond0 (unregistering): Released all slaves [ 1127.525541][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2732'. [ 1130.312299][T15279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1130.569775][T15279] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1131.967512][ T1028] hsr_slave_0: left promiscuous mode [ 1132.285356][ T1028] hsr_slave_1: left promiscuous mode [ 1132.289030][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1132.289064][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.324745][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1132.324780][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.777592][ T1028] veth1_macvtap: left promiscuous mode [ 1133.825146][ T1028] veth0_macvtap: left promiscuous mode [ 1133.825454][ T1028] veth1_vlan: left promiscuous mode [ 1133.825653][ T1028] veth0_vlan: left promiscuous mode [ 1144.262548][T15368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1144.265664][T15368] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1145.376833][ T1028] team0 (unregistering): Port device team_slave_1 removed [ 1145.433885][ T1028] team0 (unregistering): Port device team_slave_0 removed [ 1145.937287][ T5479] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1149.821855][T15401] ================================================================== [ 1149.821870][T15401] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 1149.821973][T15401] Read of size 1 at addr ffff88802ada6200 by task syz.1.2773/15401 [ 1149.821984][T15401] [ 1149.821994][T15401] CPU: 0 UID: 0 PID: 15401 Comm: syz.1.2773 Not tainted syzkaller #0 PREEMPT_{RT,(full)} SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1149.822009][T15401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1149.822018][T15401] Call Trace: [ 1149.822023][T15401] [ 1149.822028][T15401] dump_stack_lvl+0xe8/0x150 [ 1149.822050][T15401] print_address_description+0x55/0x1e0 [ 1149.822070][T15401] ? rt_spin_lock+0x83/0x400 [ 1149.822087][T15401] print_report+0x58/0x70 [ 1149.822104][T15401] kasan_report+0x117/0x150 [ 1149.822117][T15401] ? rt_spin_lock+0x83/0x400 [ 1149.822137][T15401] ? __wake_up_common_lock+0x2f/0x1e0 [ 1149.822154][T15401] __kasan_check_byte+0x2a/0x40 [ 1149.822166][T15401] lock_acquire+0x84/0x350 [ 1149.822182][T15401] rt_spin_lock+0x83/0x400 [ 1149.822200][T15401] ? __wake_up_common_lock+0x2f/0x1e0 [ 1149.822213][T15401] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1149.822232][T15401] ? __pfx_rt_spin_lock+0x10/0x10 [ 1149.822249][T15401] ? rt_spin_unlock+0x14f/0x200 [ 1149.822268][T15401] ? rt_spin_unlock+0x160/0x200 [ 1149.822286][T15401] __wake_up_common_lock+0x2f/0x1e0 [ 1149.822301][T15401] snd_pcm_stop+0x428/0x550 [ 1149.822341][T15401] loopback_trigger+0x11ff/0x1cf0 [ 1149.822398][T15401] snd_pcm_start+0x43d/0x5d0 [ 1149.822413][T15401] __snd_pcm_lib_xfer+0x175a/0x1d10 [ 1149.822448][T15401] ? __pfx_interleaved_copy+0x10/0x10 [ 1149.822466][T15401] ? __pfx_default_write_copy+0x10/0x10 [ 1149.822484][T15401] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1149.822500][T15401] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1149.822517][T15401] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1149.822535][T15401] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1149.822555][T15401] ? snd_pcm_oss_write3+0x191/0x300 [ 1149.822585][T15401] snd_pcm_oss_write3+0x1ab/0x300 [ 1149.822602][T15401] snd_pcm_oss_write2+0x2c2/0x440 [ 1149.822619][T15401] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1149.822635][T15401] ? rt_spin_unlock+0x14f/0x200 [ 1149.822653][T15401] ? rt_spin_unlock+0x160/0x200 [ 1149.822672][T15401] snd_pcm_oss_sync1+0x180/0x520 [ 1149.822692][T15401] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1149.822710][T15401] ? __pfx_default_wake_function+0x10/0x10 [ 1149.822738][T15401] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1149.822753][T15401] ? __asan_memset+0x22/0x50 [ 1149.822769][T15401] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 1149.822797][T15401] snd_pcm_oss_sync+0xab2/0xfc0 [ 1149.822816][T15401] snd_pcm_oss_release+0x102/0x250 [ 1149.822833][T15401] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1149.822849][T15401] __fput+0x461/0xa70 [ 1149.822868][T15401] task_work_run+0x1d9/0x270 [ 1149.822884][T15401] ? __pfx_task_work_run+0x10/0x10 [ 1149.822901][T15401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.822914][T15401] exit_to_user_mode_loop+0xed/0x480 [ 1149.822935][T15401] ? rcu_is_watching+0x15/0xb0 [ 1149.822961][T15401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.822982][T15401] do_syscall_64+0x33e/0xf80 [ 1149.823016][T15401] ? trace_irq_disable+0x3b/0x140 [ 1149.823029][T15401] ? clear_bhb_loop+0x40/0x90 [ 1149.823043][T15401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.823055][T15401] RIP: 0033:0x7fe60f53c819 [ 1149.823068][T15401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.823079][T15401] RSP: 002b:00007fff84ce5258 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1149.823095][T15401] RAX: 0000000000000000 RBX: 00007fe60f7b7da0 RCX: 00007fe60f53c819 [ 1149.823104][T15401] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1149.823112][T15401] RBP: 00007fe60f7b7da0 R08: 0000000000000006 R09: 0000000000000000 [ 1149.823120][T15401] R10: 00007fe60f7b7cb0 R11: 0000000000000246 R12: 0000000000118924 [ 1149.823128][T15401] R13: 00007fe60f7b609c R14: 0000000000118674 R15: 00007fe60f7b6090 [ 1149.823144][T15401] [ 1149.823149][T15401] [ 1149.823152][T15401] Allocated by task 15402: [ 1149.823159][T15401] kasan_save_track+0x3e/0x80 [ 1149.823176][T15401] __kasan_kmalloc+0x93/0xb0 [ 1149.823193][T15401] __kmalloc_cache_noprof+0x3a6/0x690 [ 1149.823204][T15401] snd_pcm_attach_substream+0x5b7/0xb20 [ 1149.823238][T15401] snd_pcm_open_substream+0xbd/0x2420 [ 1149.823250][T15401] snd_pcm_oss_open+0xf90/0x1c20 [ 1149.823265][T15401] chrdev_open+0x4d0/0x5f0 [ 1149.823277][T15401] do_dentry_open+0x83d/0x13e0 [ 1149.823290][T15401] vfs_open+0x3b/0x350 [ 1149.823303][T15401] path_openat+0x2e43/0x38a0 [ 1149.823313][T15401] do_file_open+0x23e/0x4a0 [ 1149.823322][T15401] do_sys_openat2+0x113/0x200 [ 1149.823336][T15401] __x64_sys_openat+0x138/0x170 [ 1149.823350][T15401] do_syscall_64+0x15f/0xf80 [ 1149.823363][T15401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.823374][T15401] [ 1149.823376][T15401] Freed by task 15402: [ 1149.823381][T15401] kasan_save_track+0x3e/0x80 [ 1149.823403][T15401] kasan_save_free_info+0x46/0x50 [ 1149.823416][T15401] __kasan_slab_free+0x5c/0x80 [ 1149.823432][T15401] kfree+0x1c5/0x6c0 [ 1149.823447][T15401] snd_pcm_detach_substream+0x1c8/0x270 [ 1149.823465][T15401] snd_pcm_oss_release+0x184/0x250 [ 1149.823479][T15401] __fput+0x461/0xa70 [ 1149.823494][T15401] task_work_run+0x1d9/0x270 [ 1149.823507][T15401] exit_to_user_mode_loop+0xed/0x480 [ 1149.823518][T15401] do_syscall_64+0x33e/0xf80 [ 1149.823531][T15401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.823541][T15401] [ 1149.823544][T15401] The buggy address belongs to the object at ffff88802ada6000 [ 1149.823544][T15401] which belongs to the cache kmalloc-2k of size 2048 [ 1149.823554][T15401] The buggy address is located 512 bytes inside of [ 1149.823554][T15401] freed 2048-byte region [ffff88802ada6000, ffff88802ada6800) [ 1149.823567][T15401] [ 1149.823570][T15401] The buggy address belongs to the physical page: [ 1149.823577][T15401] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ada0 [ 1149.823589][T15401] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1149.823599][T15401] flags: 0x80000000000040(head|node=0|zone=1) [ 1149.823610][T15401] page_type: f5(slab) [ 1149.823621][T[ 1149.823621][T15401] raw: 0080000000000040 ffff88801a022000 dead000000000100 dead000000000122 [ 1149.823632][T15401] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1149.823643][T15401] head: 0080000000000040 ffff88801a022000 dead000000000100 dead000000000122 [ 1149.823654][T15401] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1149.823664][T15401] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1149.823674][T15401] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1149.823680][T15401] page dumped because: kasan: bad access detected [ 1149.823687][T15401] page_owner tracks the page as allocated [ 1149.823691][T15401] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14360292502, free_ts 0 [ 1149.823714][T15401] post_alloc_hook+0x231/0x280 [ 1149.823731][T15401] get_page_from_freelist+0x27c8/0x2840 [ 1149.823744][T15401] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1149.823756][T15401] allocate_slab+0x77/0x660 [ 1149.823769][T15401] refill_objects+0x33c/0x3d0 [ 1149.823782][T15401] __pcs_replace_empty_main+0x373/0x720 [ 1149.823796][T15401] __kmalloc_cache_noprof+0x44e/0x690 [ 1149.823807][T15401] usb_create_ep_devs+0x59/0x230 [ 1149.823856][T15401] usb_new_device+0xae7/0x16e0 [ 1149.823898][T15401] register_root_hub+0x270/0x5f0 [ 1149.823914][T15401] usb_add_hcd+0xba1/0x10b0 [ 1149.823929][T15401] dummy_hcd_probe+0x134/0x270 [ 1149.823943][T15401] platform_probe+0xf9/0x190 [ 1149.823958][T15401] really_probe+0x267/0xaf0 [ 1149.823968][T15401] __driver_probe_device+0x1ef/0x380 [ 1149.823984][T15401] driver_probe_device+0x4f/0x240 [ 1149.823993][T15401] page_owner free stack trace missing [ 1149.823998][T15401] [ 1149.824000][T15401] Memory state around the buggy address: [ 1149.824007][T15401] ffff88802ada6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1149.824015][T15401] ffff88802ada6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1149.824023][T15401] >ffff88802ada6200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1149.824029][T15401] ^ [ 1149.824035][T15401] ffff88802ada6280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1149.824043][T15401] ffff88802ada6300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1149.824049][T15401] ================================================================== [ 1150.515053][T15401] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1150.515072][T15401] CPU: 0 UID: 0 PID: 15401 Comm: syz.1.2773 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1150.515088][T15401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1150.515096][T15401] Call Trace: [ 1150.515101][T15401] [ 1150.515108][T15401] vpanic+0x56c/0xa60 [ 1150.515135][T15401] ? __pfx_vpanic+0x10/0x10 [ 1150.515148][T15401] ? __pfx___schedule+0x10/0x10 [ 1150.515164][T15401] panic+0xc5/0xd0 [ 1150.515176][T15401] ? __pfx_panic+0x10/0x10 [ 1150.515188][T15401] ? preempt_schedule_common+0x82/0xd0 [ 1150.515203][T15401] ? rt_spin_lock+0x83/0x400 [ 1150.515221][T15401] check_panic_on_warn+0x89/0xb0 [ 1150.515237][T15401] ? rt_spin_lock+0x83/0x400 [ 1150.515263][T15401] end_report+0x73/0x170 [ 1150.515285][T15401] ? rt_spin_lock+0x83/0x400 [ 1150.515310][T15401] kasan_report+0x128/0x150 [ 1150.515322][T15401] ? rt_spin_lock+0x83/0x400 [ 1150.515341][T15401] ? __wake_up_common_lock+0x2f/0x1e0 [ 1150.515354][T15401] __kasan_check_byte+0x2a/0x40 [ 1150.515366][T15401] lock_acquire+0x84/0x350 [ 1150.515383][T15401] rt_spin_lock+0x83/0x400 [ 1150.515400][T15401] ? __wake_up_common_lock+0x2f/0x1e0 [ 1150.515414][T15401] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1150.515432][T15401] ? __pfx_rt_spin_lock+0x10/0x10 [ 1150.515450][T15401] ? rt_spin_unlock+0x14f/0x200 [ 1150.515469][T15401] ? rt_spin_unlock+0x160/0x200 [ 1150.515487][T15401] __wake_up_common_lock+0x2f/0x1e0 [ 1150.515502][T15401] snd_pcm_stop+0x428/0x550 [ 1150.515518][T15401] loopback_trigger+0x11ff/0x1cf0 [ 1150.515538][T15401] snd_pcm_start+0x43d/0x5d0 [ 1150.515553][T15401] __snd_pcm_lib_xfer+0x175a/0x1d10 [ 1150.515573][T15401] ? __pfx_interleaved_copy+0x10/0x10 [ 1150.515591][T15401] ? __pfx_default_write_copy+0x10/0x10 [ 1150.515609][T15401] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1150.515624][T15401] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1150.515641][T15401] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1150.515659][T15401] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1150.515678][T15401] ? snd_pcm_oss_write3+0x191/0x300 [ 1150.515695][T15401] snd_pcm_oss_write3+0x1ab/0x300 [ 1150.515712][T15401] snd_pcm_oss_write2+0x2c2/0x440 [ 1150.515730][T15401] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1150.515746][T15401] ? rt_spin_unlock+0x14f/0x200 [ 1150.515765][T15401] ? rt_spin_unlock+0x160/0x200 [ 1150.515783][T15401] snd_pcm_oss_sync1+0x180/0x520 [ 1150.515803][T15401] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1150.515821][T15401] ? __pfx_default_wake_function+0x10/0x10 [ 1150.515838][T15401] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1150.515853][T15401] ? __asan_memset+0x22/0x50 [ 1150.515869][T15401] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 1150.515881][T15401] snd_pcm_oss_sync+0xab2/0xfc0 [ 1150.515901][T15401] snd_pcm_oss_release+0x102/0x250 [ 1150.515918][T15401] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1150.515934][T15401] __fput+0x461/0xa70 [ 1150.515952][T15401] task_work_run+0x1d9/0x270 [ 1150.515969][T15401] ? __pfx_task_work_run+0x10/0x10 [ 1150.515985][T15401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.515998][T15401] exit_to_user_mode_loop+0xed/0x480 [ 1150.516011][T15401] ? rcu_is_watching+0x15/0xb0 [ 1150.516027][T15401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.516039][T15401] do_syscall_64+0x33e/0xf80 [ 1150.516053][T15401] ? trace_irq_disable+0x3b/0x140 [ 1150.516065][T15401] ? clear_bhb_loop+0x40/0x90 [ 1150.516079][T15401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.516091][T15401] RIP: 0033:0x7fe60f53c819 [ 1150.516104][T15401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.516115][T15401] RSP: 002b:00007fff84ce5258 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1150.516136][T15401] RAX: 0000000000000000 RBX: 00007fe60f7b7da0 RCX: 00007fe60f53c819 [ 1150.516145][T15401] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1150.516153][T15401] RBP: 00007fe60f7b7da0 R08: 0000000000000006 R09: 0000000000000000 [ 1150.516161][T15401] R10: 00007fe60f7b7cb0 R11: 0000000000000246 R12: 0000000000118924 [ 1150.516169][T15401] R13: 00007fe60f7b609c R14: 0000000000118674 R15: 00007fe60f7b6090 [ 1150.516182][T15401] [ 1150.516460][T15401] Kernel Offset: disabled